Privacy Policy - Gardeners Cheam

This Privacy Policy explains how Gardeners Cheam collects, uses, stores, and protects personal data when providing gardening services to customers in the Cheam area. It applies to all Gardeners Cheam customers in the area, including individuals who enquire about services, request quotations, make bookings, or receive ongoing maintenance. We are committed to handling personal information in a lawful, fair, and transparent way in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Gardeners Cheam provides gardening and outdoor maintenance services to residential and commercial customers. In the course of our work, we may process personal data relating to customers, property occupants, site visitors, suppliers, and other individuals connected to a service booking. We only collect information that is relevant to delivering our services, managing our business, and meeting legal obligations.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any details used to identify you as a customer or property contact.
Contact data: address, email address, telephone number, and preferred communication details.
Service data: details about the gardening work requested, property access arrangements, preferences, job history, and service notes.
Payment data: records relating to invoices, payment status, billing references, and transaction confirmation.
Technical data: limited information from emails, forms, or website interactions, where relevant to service delivery and security.
Communication data: records of correspondence, enquiries, complaints, feedback, and instructions.

We do not seek to collect unnecessary sensitive data. However, if you choose to provide additional information that helps us carry out work safely or accurately, we will process it only where there is a lawful reason to do so.

3. How We Collect Data

We collect personal data directly from you when you:

request a quote or make an enquiry;
book a gardening service;
provide instructions or update your preferences;
communicate by phone, email, message, or in writing;
make a payment or receive an invoice;
leave feedback or raise a concern.

We may also receive personal data from third parties where necessary for the delivery of our services, such as property managers, landlords, tenants, or household representatives who arrange work on your behalf. We only accept such information where it is appropriate and relevant to the requested service.

4. Lawful Basis for Processing

Gardeners Cheam processes personal data under one or more lawful bases permitted by GDPR. These include:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, managing bookings, carrying out gardening work, issuing invoices, and handling service-related communications.

Legitimate Interests

We may process data for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining customer records, improving service quality, preventing fraud, managing site visits, and keeping our business secure and efficient.

Legal Obligation

We may process and retain certain information where needed to comply with legal, tax, accounting, or regulatory obligations.

Consent

In limited situations, we may rely on your consent, for example where we ask to use optional information or send marketing messages that require permission. Where consent is used, you may withdraw it at any time.

5. How We Use Your Data

We use personal data to:

respond to enquiries and provide quotations;
deliver gardening and maintenance services;
manage appointments, access, and property-specific instructions;
process payments and issue invoices;
keep accurate customer and service records;
deal with complaints or service issues;
meet legal, accounting, and insurance requirements;
protect the security of our staff, customers, and systems;
improve our services and business operations.

We only use personal data in ways that are compatible with the purposes for which it was collected, unless a new lawful basis applies.

6. Data Sharing and Processors

We may share personal data with trusted processors and service providers who support our business operations. These third parties act on our instructions and are required to protect your information appropriately.

Examples of processors may include:

Payment providers for handling card or bank-related transactions;
Accounting and bookkeeping services for financial recordkeeping;
IT and cloud storage providers for secure data hosting, email, and document management;
Customer management tools used to organise bookings and service records;
Professional advisers such as accountants, insurers, or legal advisers where needed;
Subcontractors or operational partners where a task requires assistance in delivering the service.

We do not sell personal data. If disclosure is required by law, to protect legal rights, or to respond to a valid request from public authorities, we may share data in accordance with applicable rules.

7. International Transfers

Where any processor stores or accesses data outside the United Kingdom, we take steps to ensure that suitable safeguards are in place. These may include approved contractual protections and assessments of the receiving country’s data protection standards.

8. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy. Retention periods depend on the type of data, the service provided, and any legal requirements.

Customer and service records: retained for the duration of the relationship and for a reasonable period afterwards.
Invoice and accounting records: retained for the period required by tax and financial law.
Communication records: kept as long as needed to manage services, resolve queries, or maintain evidence of instructions.
Marketing preferences: retained until you withdraw consent or opt out.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

9. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality practices, and limiting data access to those who need it for legitimate business purposes. While no system is completely risk-free, we take reasonable steps to safeguard the information we hold.

10. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exemptions depending on the circumstances.

Right of access: you can request confirmation of whether we process your data and obtain a copy of it.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data where it is no longer needed or where another legal basis applies.
Right to restriction: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request data you provided to us in a structured, commonly used format, where applicable.
Right to withdraw consent: where processing relies on consent, you may withdraw that consent at any time.

If you wish to exercise any of these rights, we will review your request and respond in accordance with applicable law. We may need to verify your identity before processing certain requests.

11. Automated Decision-Making

Gardeners Cheam does not normally use automated decision-making or profiling in a way that produces legal or similarly significant effects. If this changes, we will update this policy and explain the approach clearly.

12. Children’s Data

Our services are aimed at adults and property-related contacts. We do not knowingly collect personal data from children unless it is supplied incidentally and is necessary for the service arrangement. If we become aware that we have collected data inappropriately, we will take steps to delete it where appropriate.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practice, or how we process data. The latest version will always apply to Gardeners Cheam customers in the area from the date it is issued. We encourage customers to review this policy periodically to stay informed.

14. Your Responsibilities

Where you provide us with information, you should make sure it is accurate and up to date. If you share details about access, property conditions, or service preferences, please only include information that is relevant to the gardening work being carried out. Providing accurate information helps us deliver services safely and efficiently.

Gardeners Cheam respects your privacy and is committed to handling personal data responsibly. By using our services, you acknowledge that this policy explains how we process information in connection with our gardening work in the Cheam area. We aim to keep our data practices clear, proportionate, and aligned with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Privacy Policy is designed to support GDPR-compliant processing for all Gardeners Cheam customers in the area.